Lucene search
+L

388 matches found

NVD
NVD
added 2018/07/03 2:29 p.m.27 views

CVE-2018-4855

A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. Unencrypted storage of passwords in the client configuration files and during network transmission could allow an attacker in a privileged position to obtain access passwords...

6.5CVSS6.3AI score0.01023EPSS
SaveExploits0References2
CVE
CVE
added 2018/07/03 2:00 p.m.54 views

CVE-2018-4855

CVE-2018-4855 affects Siemens SICLOCK TC100/TC400 (All versions). Root cause is unencrypted storage of passwords in client configuration files and during network transmission, enabling an attacker in a privileged position to obtain device access passwords. Public details describe an information d...

6.5CVSS6.2AI score0.01023EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/07/03 2:00 p.m.25 views

CVE-2018-4855

A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. Unencrypted storage of passwords in the client configuration files and during network transmission could allow an attacker in a privileged position to obtain access passwords...

6.3AI score0.01023EPSS
SaveExploits0References2
Veracode
Veracode
added 2018/01/29 12:18 a.m.31 views

Unencrypted Password Store

build-publisher stores passwords unencrypted. Anyone with access to the local file system can access credentials to other Jenkins systems. The credentials are also transmitted in plaintext which exposes them to various other attacks...

7.8CVSS7.3AI score0.00375EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/09/28 12:00 a.m.11 views

The vulnerability of the Advantech WebAccess remote monitoring software lies in the lack of protection for email account credentials, allowing attackers to access confidential information.

The vulnerability of Advantech WebAccess remote monitoring software lies in the lack of protection for email account credentials stored in unencrypted form. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

5CVSS6.4AI score0.01765EPSS
SaveExploits0References5Affected Software1
Atlassian
Atlassian
added 2014/10/14 5:42 p.m.22 views

Adding Subscription Cal by URL stores user password unencrypted

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-48402. panel I discovered that calendar subscriptions not only store user credentials, but do so unencrypted!!! There is really...

1.2AI score
SaveExploits0Affected Software1
Packet Storm
Packet Storm
added 2005/04/18 12:00 a.m.26 views

firefly_pass_recovery.txt

--------------------- Application: --------------------- FireFly 1.0 --------------------- Introduction: --------------------- Vendor: NetCruiser Software www.netcruiser-software.com Vendor Description: Firefly is a Windows application that allows you to share files with other users. Firefly uses...

7.4AI score
SaveExploits0
CERT
CERT
added 2002/08/07 12:00 a.m.46 views

Nevrona Designs MiraMail stores all configuration and user account information in unencrypted text file

Overview Some versions of MiraMail store username and passwords in a text file without using encryption. Description MiraMail is a news server for Windows-based hosts. Versions of MiraMail up to and including 1.04 store MiraMail user data, including usernames and passwords, in unencrypted plainte...

2.1CVSS6AI score0.00424EPSS
SaveExploits0References2
Rows per page
Query Builder